Red Hat Security AdvisoryRHSA-2024:1881
kernel security and bug fix update
Released 2024-04-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.2) kernel-tools-libs-devel-5.14.0-284.62.1.el9_2
- Red Hat Enterprise Linux AppStream EUS (v.9.2) kernel-64k-debug-devel-5.14.0-284.62.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.62.1.el9_2, kernel-64k-devel-5.14.0-284.62.1.el9_2 +10
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) bpftool-7.0.0-284.62.1.el9_2, kernel-5.14.0-284.62.1.el9_2, kernel-64k-5.14.0-284.62.1.el9_2 +29
Fixes 5 records
Priority MEDIUM 62
A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00969 · Published 2024-02-04 · Partial fix · 4.18.0-553.5.1.rt7.346.el8_10, 4.18.0-553.5.1.el8_10 +5 CWE-203
Priority MEDIUM 44
In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tls_decrypt_sg doesn't take a reference on the pages from clear_skb, so the put_page()…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00715 · Published 2024-02-21 · Partial fix · 6.1.79, 6.6.18 +2 CWE-416
Priority MEDIUM 43
In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTO_TFM_REQ_MAY_BACKLOG flag on our requests to the crypto API, crypto_aead_{…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0074 · Published 2024-02-21 · Partial fix · 5.15.160, 6.1.84 +3 CWE-755
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: gro: fix ownership transfer If packets are GROed with fraglist they might be segmented later on and continue their journey in the stack.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00243 · Published 2024-05-19 · Partial fix · 5.15.154, 6.1.85 +3
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix stack corruption When tc filters are first added to a net device, the corresponding local port gets bound to an ACL group…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00247 · Published 2024-02-22 · Partial fix · 5.10.209, 5.15.148 +4 CWE-787
THREATIST.IORead the docs